diagnostics.roche.com

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number f7:54:42:b6:fd:19:83:54:e7:a0:50:57:16:e6:b5:d2 was issued on by COMODO CA Limited.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=diagnostics.roche.com

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): f7:54:42:b6:fd:19:83:54:e7:a0:50:57:16:e6:b5:d2
Serial Number (int): 328756821031881115560911182910357681618
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 48:8f:d6:e8:ca:5c:21:ac:fb:de:43:a1:f9:ca:ab:cc:5e:76:e1:d3
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): ea:42:ce:ff:6c:a3:da:2d:51:47:ca:f2:b0:97:da:1f:ce:64:c8:98
Fingerprint (sha256): a1:2a:b4:55:c3:23:0f:94:70:64:0c:59:b1:b2:a3:26:e2:41:b4:cf:0d:1d:da:9b:6d:bf:5a:35:89:1a:a8:c8

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate diagnostics.roche.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diagnostics.roche.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

diagnostics.roche.com
author-eu-Train.roche.com
author-eu-dev.roche.com
author-eu-owpdev.roche.com
author-eu-prod.roche.com
author-eu-qa.roche.com
author-eu-stage.roche.com
biotinfacts.roche.com
brand.cobas.com
campaigns-test.roche.com
campaigns.roche.com
cobas.com
diagnostics-dev.roche.com
diagnostics-owp-dev.roche.com
diagnostics-qa.roche.com
diagnostics-test.roche.com
diagnosticschina-perf-dev.roche.com
diagnosticschina-perf.roche.com
dialog-dev.roche.com
dialog-prod.roche.com
dialog-qa.roche.com
dialog-test.roche.com
dialog.roche.com
dialogChina-perf.roche.com
dialogchina-perf-dev.roche.com
dual-target.com
e-labdoc.roche.com
elabdoc.roche.com
eservices-test.roche.com
flow.roche.com
hcvdualprobe.com
hivdualtarget.com
hpv16and18.com
hpvactnow.com
insights-test.roche.com
insights.roche.com
lableaders.roche.com
ldtsolutions.roche.com
magnapure.com
magnapure24.com
magnapure96.com
molecular.roche.com
multichannel-dev.roche.com
multichannel-qa.roche.com
multichannel-test.roche.com
multichannel.roche.com
origin-diagnostics-owp-dev.roche.com
origin-diagnostics-qa.roche.com
origin-diagnostics-test.roche.com
origin-diagnostics.roche.com
preeclampsia-awareness.roche.com
preview-owp.dev.roche.com
preview-owp.qa.roche.com
preview-owp.roche.com
preview-owp.test.roche.com
rms-affiliate-resource-stage.roche.com
rms-affiliate-resource.roche.com
roche-diagnostics.cn
roche-eu-stage-2-owp.roche.com
roche-eu-stage-2.roche.com
roche-eu-train-owp.roche.com
roche-eu-train.roche.com
rocheflowcommunity.com
showpad.roche.com
supportrequest.roche.com
usdiagnostics.roche.com
www.biotinfacts.roche.com
www.cobas.com
www.diagnostics-test.roche.com
www.diagnostics.roche.com
www.dialog.roche.com
www.e-labdoc.roche.com
www.elabdoc.roche.com
www.eservices-test.roche.com
www.hcvdualprobe.com
www.hivdualtarget.com
www.hpvactnow.com
www.lableaders.roche.com
www.ldtsolutions.roche.com
www.magnapure.com
www.magnapure24.com
www.magnapure96.com
www.preeclampsia-awareness.roche.com
www.roche-diagnostics.cn
www.supportrequest.roche.com
www.xlab.roche.com
xlab.roche.com

Other certificates including the domain name roche.com

(limited to 100 certificates)
involve.roche.com
www.hpv16and18.com
easydrive-uat.roche.com
advancedanalytics.roche.com
main.rhelp.roche.com
sni.cloudflaressl.com
magentocloud28.map.fastly.net
rbalvprexd0.bas.roche.com
cieas01.roche.com
harmonytest.de
sequencing.roche.com
esource.roche.com
e-medical.roche.com
esource.roche.com
coaguchek.com
rsmsourcing.roche.com
deimos.roche.com
cert2.roche.com
sni.cloudflaressl.com
cdn.appstore.gene.com
shpivee1-01.roche.com
eews-dev.roche.com
myaccess.roche.com
ican.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
cert3.roche.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mrdivee2-02.netlab.roche.com
rodip.roche.com
nsrdcongresses.roche.com
rbavxsentry11.bas.roche.com
mobilesolution-dev.roche.com
wamua.roche.com
dialog-62-test.roche.com
rocheggcpac.roche.com
san-003.ceros.com
video.hive.roche.com
sni.cloudflaressl.com
rssg.roche.com
mftemeaext.roche.com
anadisuat01.sc1.roche.com
careers.roche.com
flow.roche.com
cert3.roche.com
sni.cloudflaressl.com
misp.roche.com
cert2.roche.com
careers.roche.com
api.rockwizz.roche.com
bitbucket-nala-qa.roche.com
careers.roche.com
wamdev.roche.com
sonar-dev-old.roche.com
diauxhub.roche.com
careers.roche.com
globalfms.roche.com
san-003.ceros.com
sc1lvflexq2.sc1.roche.com
easydrive-dev.roche.com
send-tst.roche.com
indigrow.roche.com
careers.roche.com
careers.roche.com
env5-remotedashboard.roche.com
mrd25.me
cert2.roche.com
*.esrv-hub-uat.roche.com
sb.eu.phcaa.science.roche.com
san-003.ceros.com
extaccess-nala.roche.com
magentocloud28.map.fastly.net
go.roche.com
magentocloud32.map.fastly.net
sni.cloudflaressl.com
ssl882748.cloudflaressl.com
sni.cloudflaressl.com
esrv-marketplace-dev.roche.com
careers.roche.com
imcore.roche.com
booster.roche.com
sni.cloudflaressl.com
akamai-san195.exacttarget.com
raumbuch.roche.com
pitas01.roche.com
sni.cloudflaressl.com
c1edb.roche.com
magentocloud45.map.fastly.net
shpivee1-01.roche.com
hpv16and18.com
hivemind.roche.com
searchsquad.roche.com
cferondanetrochedia-qa.roche.com
esign.roche.com
diaitsupport.roche.com
sni.cloudflaressl.com
magentocloud32.map.fastly.net
r32web.sap.roche.com
apis.cwp.roche.com

Certificate

The complete raw certificate details for diagnostics.roche.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocGeN5GF143542Y95epx
9vkkaTDY0hcNJsd2ylg4tWNMhZIDnm4uEE704267VknVIc1YcR/fj5OO81pNGl6Y
TK1jNBdwoOpGz0lkYkse13KrUgVgL0cQBghIoSySVYitrLzRlHv0jWnWSZbp8luq
8kJFvn3q/O36/3lRqanZOuI/tjFztR5t5mDXbq1jcDgqozjebjXnork4qBg/DT5p
3++7bv5XTDMP37uI9mTv/64vjk+41ymKhwNRP7VbWiXxMIEq1OJe4OCsnxMzAOMc
JfMs2gmn5FuDj1OnE81TUBqkIY8wCgzYarqCJYshxD6tHnjhM8hgG1vJMf14/Al6
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328756821031881115560911182910357681618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diagnostics.roche.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20419843711256795993786263938625718620199100822925640185586776345840061942936704981823009288630469862659054919609457388324911300310629391425660852137077628660553718362386267906899149930717871538900862393182600751354768749911549905783826343250939479100944988345569281393879170061230399198347646164841490860203654124459995467087078328841097997336548857869233979300591978795466502712369415850499417668280024687282541077699246971148452125198043164805103964164771239951015674379241888284320430235684279251355207006771317882669459465648422222613011694868977557989087209727603768952630405501692981643189651835780782476589641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							488fd6e8ca5c21acfbde43a1f9caabcc5e76e1d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-Train.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-owpdev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-prod.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-eu-stage.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biotinfacts.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.cobas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaigns-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaigns.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics-owp-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnostics-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnosticschina-perf-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnosticschina-perf.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-prod.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialog.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogChina-perf.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogchina-perf-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dual-target.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-labdoc.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elabdoc.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flow.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcvdualprobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hivdualtarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpv16and18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpvactnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lableaders.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldtsolutions.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnapure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnapure24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnapure96.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molecular.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multichannel-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multichannel-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multichannel-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multichannel.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-diagnostics-owp-dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-diagnostics-qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-diagnostics-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-diagnostics.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preeclampsia-awareness.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-owp.dev.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-owp.qa.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-owp.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-owp.test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms-affiliate-resource-stage.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms-affiliate-resource.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-diagnostics.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-stage-2-owp.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-stage-2.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-train-owp.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-eu-train.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheflowcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showpad.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportrequest.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdiagnostics.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biotinfacts.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cobas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diagnostics-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diagnostics.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialog.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-labdoc.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elabdoc.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eservices-test.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcvdualprobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hivdualtarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpvactnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lableaders.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ldtsolutions.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnapure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnapure24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnapure96.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preeclampsia-awareness.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roche-diagnostics.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportrequest.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xlab.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlab.roche.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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